The cafile parameter in the authentication section is required
in the senlin.conf configuration file when working with
self-signed certificates.

Change-Id: I3cd43cc7f43782a6c1d701a3e5b977bbc42e3719
(cherry picked from commit 9dc2b01)

Unlike other methods such as resolve(), get() does not return an Undefined object, but None.
This removes 4 ansible-lint warnings in various files calling kolla_address.

Closes-Bug: #2038281

Change-Id: I591a50512a954210f951c40a350ed4b9e1fc48ae
(cherry picked from commit eec8b05)

This patch add connection local for above mentioned task as
kolla-ansible can be executed in docker container as in
my case.

When there is no connection: local, ansible is trying to connect
to localhost via ssh where specified python script is not available.

After connection: local everything is working as expected as file
is found inside container

Closes-Bug: #2004224

Change-Id: I219a958b4f101efb71a2935e6d910dae5c65f0be
(cherry picked from commit 78cf958)

This patch fixing issue with octavia security group
rules creation when using IPv6 configuration for octavia
management network.

Closes-Bug: #2023502
Change-Id: I3f8fbb0632ec6ecdc9f3820ebbcf01480de59e1f
(cherry picked from commit f1bb97d)

This patch introduces distributed lock for masakari-api
service when handle the concurrent notifications for the same
host failure from multiple masakari-hostmonitor services.

Change-Id: I46985202dc8da22601357eefe2727599e7a413e5
(cherry picked from commit 842adf6)

Use HTTPS to scrape etcd metrics when etcd TLS is enabled.

Change-Id: Iaff10d5314a8dc5b07137d93c269f1ac24cf63de
Closes-Bug: #2036950
(cherry picked from commit 05df4e7)

Since switching to use HAProxy to access Prometheus OpenStack exporter,
scraping would fail when using internal TLS with an FQDN (rather than an
IP address) to access the API.

This patch fixes the issue by using the FQDN instead of the VIP address.

Change-Id: Iddbdc4190b7953e9140d0740daf57f4062ba1b76
Closes-Bug: #2008208
(cherry picked from commit c283882)

When cinder_backend_ceph is set to true, privileged is needed
for glance-api.

Change-Id: I92c2744d2475924ef3a2c7ae6cea7e44461de424
Partial-Bug: #2024541
(cherry picked from commit 70c57d3)

Related-Bug: #2015184

Closes-Bug: #2015184

Change-Id: I6ea0949d58e38e2cda41c9702001e7bd500f23f1
(cherry picked from commit b9f2ad9)

Implements: Kolla Ansible
Closes-Bug: #2043554
Change-Id: I5648a79b4aa1960f1984a5179e3dfc3f0982c709

Change-Id: I8f25c7619c45157f6354fb42bf9f28ec194389ed
(cherry picked from commit 0cc0624)

Closes-Bug: #2024554
Change-Id: Id6eae798784126d4dd53adef15bdce6b47b4601f
(cherry picked from commit 842e758)

The wrong process name was being used.

Closes-Bug: #2046268
Change-Id: I5a5d4f227205e811732331ee6e020ccea67b6fab
(cherry picked from commit 693c5c8)

Closes-Bug: #2030467

Change-Id: I7646f929b7edc2684102ae1b5927bcc75f0c87c9
(cherry picked from commit df6096d)

…input" into stable/zed

…te task" into stable/zed

…e/zed

…an be used" into stable/zed

We previously used ElasticSearch Curator for managing log
retention. Now that we have moved to OpenSearch, we can use
the Index State Management (ISM) plugin which is bundled with
OpenSearch.

This change adds support for automating the configuration of
the ISM plugin via the OpenSearch API. By default, it has
similar behaviour to the previous ElasticSearch Curator
default policy.

Closes-Bug: #2047037

Change-Id: I5c6d938f2bc380f1575ee4f16fe17c6dca37dcba
(cherry picked from commit 5e5a2dc)

…e/zed

…table/zed

…/zed

…ble/zed